Xymon 4.3.19 Released
list Japheth Cleaver
Hello, Xymon 4.3.19 has been released to SF and should be available on a mirror near you! It can be downloaded from https://sourceforge.net/projects/xymon/ 4.3.19 contains a number of bug fixes and improvements, along with a several new features. - a report on all recent acknowledgements is now available - a specific time range can now be excluded for analysis or alerting purposes with the EXTIME= directive - additional filters are available with the "xymondboard" command, including searching the full body text of a status report - the last position read in a log file is now indicated on the 'msgs' status report - a new 'deltacount' option for counting recent matching lines in a log file - improved Windows PowerShell client support For a full list of changes, see the Changes file inside the tarball. All users of 4.3.x or earlier versions of Xymon are encouraged to upgrade. Regards, -jc
list Galen Johnson
Have the contents of cgi-bin and cgi-secure-bin always been symlinks? I don't think so...which means I had to add "FollowSymLinks" to my apache config file to allow it to work. I would prefer not to have to set this on my cgi folders. =G=
▸
From: Xymon <xymon-bounces at xymon.com> on behalf of J.C. Cleaver <user-87556346d4af@xymon.invalid> Sent: Tuesday, March 31, 2015 2:36 AM To: Xymon Mailinglist Cc: Xymon Development Subject: [Xymon] Xymon 4.3.19 Released Hello, Xymon 4.3.19 has been released to SF and should be available on a mirror near you! It can be downloaded from https://sourceforge.net/projects/xymon/ 4.3.19 contains a number of bug fixes and improvements, along with a several new features. - a report on all recent acknowledgements is now available - a specific time range can now be excluded for analysis or alerting purposes with the EXTIME= directive - additional filters are available with the "xymondboard" command, including searching the full body text of a status report - the last position read in a log file is now indicated on the 'msgs' status report - a new 'deltacount' option for counting recent matching lines in a log file - improved Windows PowerShell client support For a full list of changes, see the Changes file inside the tarball. All users of 4.3.x or earlier versions of Xymon are encouraged to upgrade. Regards, -jc
list Bill Arlofski
▸
On 03/31/2015 02:36 AM, J.C. Cleaver wrote:
Hello, Xymon 4.3.19 has been released to SF and should be available on a mirror near you! It can be downloaded from https://sourceforge.net/projects/xymon/ 4.3.19 contains a number of bug fixes and improvements, along with a several new features. - a report on all recent acknowledgements is now available - a specific time range can now be excluded for analysis or alerting purposes with the EXTIME= directive - additional filters are available with the "xymondboard" command, including searching the full body text of a status report - the last position read in a log file is now indicated on the 'msgs' status report - a new 'deltacount' option for counting recent matching lines in a log file - improved Windows PowerShell client support For a full list of changes, see the Changes file inside the tarball. All users of 4.3.x or earlier versions of Xymon are encouraged to upgrade. Regards, -jc
Thank you J.C. for all the hard work! Had a colleague just discover how awesome Xymon is - by installing and setting it up on his own network. Up until this past month he knew about it for _years_ (because I talk about it all the time :), but he finally installed it and can not stop raving about Xymon. :) Great job, and thank you for all your contributions to Xymon! Bill -- Bill Arlofski Reverse Polarity, LLC http://www.revpol.com/ -- Not responsible for anything below this line --
list Japheth Cleaver
This was a change in 4.3.18, with "cgiwrap" being a replacement for the original shell script wrappers to mitigate the Shellshock vulnerability. One option, if you didn't want to add FollowSymLinks would be to store bin/cgiwrap directly in the cgi-bin,secure-bin directories under the original wrapper names. To save space, they could be hardlinked to the same binary on installation. -jc
▸
On Tue, March 31, 2015 1:25 pm, Galen Johnson wrote:Have the contents of cgi-bin and cgi-secure-bin always been symlinks? I don't think so...which means I had to add "FollowSymLinks" to my apache config file to allow it to work. I would prefer not to have to set this on my cgi folders. =G= From: Xymon <xymon-bounces at xymon.com> on behalf of J.C. Cleaver <user-87556346d4af@xymon.invalid> Sent: Tuesday, March 31, 2015 2:36 AM To: Xymon Mailinglist Cc: Xymon Development Subject: [Xymon] Xymon 4.3.19 Released Hello, Xymon 4.3.19 has been released to SF and should be available on a mirror near you! It can be downloaded from https://sourceforge.net/projects/xymon/ 4.3.19 contains a number of bug fixes and improvements, along with a several new features. - a report on all recent acknowledgements is now available - a specific time range can now be excluded for analysis or alerting purposes with the EXTIME= directive - additional filters are available with the "xymondboard" command, including searching the full body text of a status report - the last position read in a log file is now indicated on the 'msgs' status report - a new 'deltacount' option for counting recent matching lines in a log file - improved Windows PowerShell client support For a full list of changes, see the Changes file inside the tarball. All users of 4.3.x or earlier versions of Xymon are encouraged to upgrade. Regards, -jc
list Galen Johnson
Thanks, I'll likely just change the definition in the xymon.conf file to point to the actual physical location when I get a chance to circle back. I'm just concerned about the security implications for allowing FollowSymLinks for my cgi areas. =G=
▸
From: J.C. Cleaver <user-87556346d4af@xymon.invalid>
Sent: Tuesday, March 31, 2015 4:51 PM
To: Galen Johnson
Cc: Xymon Mailinglist; Xymon Development
Subject: Re: [Xymon] Xymon 4.3.19 Released
This was a change in 4.3.18, with "cgiwrap" being a replacement for the
original shell script wrappers to mitigate the Shellshock vulnerability.
One option, if you didn't want to add FollowSymLinks would be to store
bin/cgiwrap directly in the cgi-bin,secure-bin directories under the
original wrapper names. To save space, they could be hardlinked to the
same binary on installation.
-jc
On Tue, March 31, 2015 1:25 pm, Galen Johnson wrote:Have the contents of cgi-bin and cgi-secure-bin always been symlinks? I don't think so...which means I had to add "FollowSymLinks" to my apache config file to allow it to work. I would prefer not to have to set this on my cgi folders. =G= From: Xymon <xymon-bounces at xymon.com> on behalf of J.C. Cleaver <user-87556346d4af@xymon.invalid> Sent: Tuesday, March 31, 2015 2:36 AM To: Xymon Mailinglist Cc: Xymon Development Subject: [Xymon] Xymon 4.3.19 Released Hello, Xymon 4.3.19 has been released to SF and should be available on a mirror near you! It can be downloaded from https://sourceforge.net/projects/xymon/ 4.3.19 contains a number of bug fixes and improvements, along with a several new features. - a report on all recent acknowledgements is now available - a specific time range can now be excluded for analysis or alerting purposes with the EXTIME= directive - additional filters are available with the "xymondboard" command, including searching the full body text of a status report - the last position read in a log file is now indicated on the 'msgs' status report - a new 'deltacount' option for counting recent matching lines in a log file - improved Windows PowerShell client support For a full list of changes, see the Changes file inside the tarball. All users of 4.3.x or earlier versions of Xymon are encouraged to upgrade. Regards, -jc
list Tom Schmidt
I also noticed this change with 4.3.18. I hard linked the cgiwrap to each of the cgis, as I did not want to enable FollowSymLinks on the Apache web server. Tom
▸
On 03/31/2015 02:51 PM, J.C. Cleaver wrote:This was a change in 4.3.18, with "cgiwrap" being a replacement for the original shell script wrappers to mitigate the Shellshock vulnerability. One option, if you didn't want to add FollowSymLinks would be to store bin/cgiwrap directly in the cgi-bin,secure-bin directories under the original wrapper names. To save space, they could be hardlinked to the same binary on installation. -jc On Tue, March 31, 2015 1:25 pm, Galen Johnson wrote:Have the contents of cgi-bin and cgi-secure-bin always been symlinks? I don't think so...which means I had to add "FollowSymLinks" to my apache config file to allow it to work. I would prefer not to have to set this on my cgi folders. =G= From: Xymon <xymon-bounces at xymon.com> on behalf of J.C. Cleaver <user-87556346d4af@xymon.invalid> Sent: Tuesday, March 31, 2015 2:36 AM To: Xymon Mailinglist Cc: Xymon Development Subject: [Xymon] Xymon 4.3.19 Released Hello, Xymon 4.3.19 has been released to SF and should be available on a mirror near you! It can be downloaded from https://sourceforge.net/projects/xymon/ 4.3.19 contains a number of bug fixes and improvements, along with a several new features. - a report on all recent acknowledgements is now available - a specific time range can now be excluded for analysis or alerting purposes with the EXTIME= directive - additional filters are available with the "xymondboard" command, including searching the full body text of a status report - the last position read in a log file is now indicated on the 'msgs' status report - a new 'deltacount' option for counting recent matching lines in a log file - improved Windows PowerShell client support For a full list of changes, see the Changes file inside the tarball. All users of 4.3.x or earlier versions of Xymon are encouraged to upgrade. Regards, -jc
--
Micron Technology, Inc., Confidential and Proprietary Tom L. Schmidt Central Engineering System Administrator Lead Micron Technology, Inc. http://www.micron.com/ 8000 S. Federal Way P.O. Box 6 Mail Stop 01-351 Boise, Idaho USA 83707-0006 mailto:user-48d3fa8908d4@xymon.invalid http://cesa.micron.com/
list Andy Smith
▸
J.C. Cleaver wrote:
Hello, Xymon 4.3.19 has been released to SF and should be available on a mirror near you! It can be downloaded from https://sourceforge.net/projects/xymon/ 4.3.19 contains a number of bug fixes and improvements, along with a several new features. - a report on all recent acknowledgements is now available - a specific time range can now be excluded for analysis or alerting purposes with the EXTIME= directive - additional filters are available with the "xymondboard" command, including searching the full body text of a status report - the last position read in a log file is now indicated on the 'msgs' status report - a new 'deltacount' option for counting recent matching lines in a log file - improved Windows PowerShell client support For a full list of changes, see the Changes file inside the tarball. All users of 4.3.x or earlier versions of Xymon are encouraged to upgrade. Regards, -jc
Someone has pointed out here that columndoc.sh is not working. It must have been like this since the cgiwrap shellshock workaround went in. I would have had a go at a fix, but not sure where the preferred place would be, either add the QUERY_STRING into cgiwrap or deal with it directly in csvinfo? -- Andy
list Japheth Cleaver
▸
On Thu, April 16, 2015 1:08 pm, Andy Smith wrote:
Someone has pointed out here that columndoc.sh is not working. It must have been like this since the cgiwrap shellshock workaround went in. I would have had a go at a fix, but not sure where the preferred place would be, either add the QUERY_STRING into cgiwrap or deal with it directly in csvinfo? -- Andy
I can confirm this is the case, and it's definitely a bug. A fix would be preferably in the translation layer that cgiwrap is doing, I'd think, if you'd like to submit one. Regards, -jc